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DETAILED ACTION 

1 . This is in response to the amendment filed April 9, 2008. Claims 1 8, 30-32 have 
been amended; claim 17 was previously cancelled. Claims 1-16 and 18-32 are pending 
and have been considered below. 

Claim Objections 

2. In light of the amendment to claim 31 , the objection applied there against has 
been withdrawn 

Claim Rejections - 35 USC § 101 

3. Applicant has amended claims 30 to recite that the system is "embodied on a 
computer readable storage medium". Accordingly, the rejection under 35 U.S.C 101 has 
been withdrawn. 

Response to Arguments 

4. Applicant's arguments filed 04/09/2008 have been fully considered but they are 
not persuasive. 

5. With regard to claims 31 and 32, Applicant argued that "corrigan et al is 
concerned with WAP provisioning and silent regarding security options including at least 
conversion of a subscription from a first type to a second type." See response at pages 
8 and 9. 

6. The examiner respectfully disagrees because of the following reasons: 

It should be noted that corrigan et a! discloses security options including at least 
conversion of a subscription from a first type to a second type. See column 2, lines 5-7 
and column 3, lines 19-24. 
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7. Applicant contended that "Swift et al is not citable as a prior art reference under 
[based upon] 35 U.S.C 103(c)." Applicant states. "Swift et al is under an obligation of 
assignment to Microsoft corporation as is the subject application." 

8. The examiner respectfully disagrees because of the following reasons: 

It should be noted that "[T]he burden of establishing that subject matter is disqualified as 
prior art is placed on applicant once the examiner has established a prima facie case of 
obviousness based on the subject matter. For example, the fact that the reference and 
the application have the same assignee is not, by itself, sufficient evidence to disqualify 
the prior art under 35 U.S.C. 103(c). There must be a statement that the common 
ownership was "at the time the invention was made." See MPEP 706.02(l)(1)l. 
Accordingly, the Swift et al reference is still applied and considered to be prior art until 
such statement is provided. 

9. Also, Applicant asserted that the combination of Cheng and Swift is based on 
hindsight. 

1 0. The examiner respectfully disagrees because of the following reasons. 

It must be recognized that any judgment on obviousness is in a sense necessarily a 
reconstruction based upon hindsight reasoning. But so long as it takes into account only 
knowledge which was within the level of ordinary skill at the time the claimed invention 
was made, and does not include knowledge gleaned only from the applicant's 
disclosure, such a reconstruction is proper. See In re McLaughlin, 443 F.2d 1392, 170 
USPQ 209 (CCPA 1971). In the present instance, the examiner takes into account only 
knowledge which was within the level of ordinary skill at the time the claimed invention 
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was made, and does not include knowledge gleaned only from the applicant's 
disclosure. 

1 1 . Applicant also argued that "Cheng is silent regarding an entity requesting access 
to an object on behalf of another entity". See response at page 1 0. 

12. The examiner respectfully disagrees because of the following reasons: 

13. It should be noted that the claims (1-3, 5, 6 and 8) were rejected under 35 USC 
103 as being obvious over Cheng and Swift et al. Applicant only argued against the 
teachings of Cheng. Applicant did not address/contest the teachings of Swift, except 
that the Swift reference is not prior art under 35 USC 103(c). However, there is 
statement of common ownership at the time of the present application was filed as 
noted above. Applicant is reminded that, "One cannot show nonobviousness by 
attacking references individually where the rejections are based on combinations of 
references. In re Keller, 642 F.2d 413, 208 USPQ 871 (CCPA 1981); Tn re Merck & 
Co., Inc., 800 F.2d 1091 , 231 USPQ 375 (Fed. Cir. 1986)." 

It is submitted that Swift et al discloses "an entity requesting access to an object on be 
half of another entity" as detailed in the Office action. 

In addition, Shambroom (6,198,824) discloses a system for providing secure remote 
command execution network, wherein "an entity requesting access to an object on 
behalf of another entity". See abstract and Figs. 1 , 3 and 4. 
Also, Higley et al (5,913,025) discloses a method and apparatus for proxy 
authentication, wherein "an entity requesting access to an object on behalf of another 
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entity." See Fig. 6 and column 10, lines 35-53. It should also be noted that the entities of 
Higley et al are "individual human or a business". 

14. Regarding claims 18-29, Applicant asserted that "Beckwith et al is silent 
regarding a security option which include at least conversion of a subscription from a 
first type associated with a first tenant to a second type associated with a second 
tenant, wherein the security option indicates allowability of the second tenant to convert 
the subscription type from the first type to the second type." 

1 5. The examiner respectfully disagrees because of the following reasons: 
First, Beckwith et al was used primarily for teaching "storing one or more security 
options". 

As noted above, Corriqan et al discloses security options including at least conversion 
of a subscr4tion from a first type to a second type. See column 2, lines 5-7 and column 
3, lines 19-24. 

In addition, it should be noted that Corrigan et a! teaches "storing one or more security 
options". See column 2, lines 9-14. 

Furthermore, it is submitted that Beckwith et al (6,330,598) discloses a global service 
management system for an advanced intelligent network, wherein there is provided "a 
security option which include at least conversion of a subscription from a first type 
associated with a first tenant to a second type associated with a second tenant, wherein 
the security option indicates allowability of the second tenant to convert the subscription 
type from the first type to the second type". See column 3, lines 29-40; column 6, lines 
5- 9; column 7, lines 54-56; column 8, lines 47-58; column 10 and 13. 
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16. Applicant further argued, with respect to the Corrigan et al reference, "the WAP 
user is accessing the server hosting the services on their own behalf, not on behalf of 
another WAP user." 

According to Applicant, "Cheng and Corrigan et al fail[s] to teach or suggest, "wherein 
the entity requests access to an object on behalf of another entity, the entity and the 
another entity are each on an individual human or a business" and that "the verification 
component permits the another entity to call or operate on the object upon verification 
that the entity has the permission." 

1 7. The examiner respectfully disagrees because of the following reasons: 

It is submitted that Swift et al discloses "an entity requesting access to an object on 
behalf of another entity" as detailed in the Office action. 

In addition, Shambroom (6,198,824) discloses a system for providing secure remote 
command execution network, wherein "an entity requesting access to an object on 
behalf of another entity". See abstract and Figs. 1 , 3 and 4. 
Also, Hiqlev et al (5,913,025) discloses a method and apparatus for proxy 
authentication, wherein "an entity requesting access to an object on behalf of another 
entity." See Fig. 6 and column 10, lines 35-53. It should also be noted that the entities of 
Higley et al are "individual human or a business". 

13. According to Applicant, "the access rights [of Garg et all are related to an entity 
directly accessing an object for themselves." Applicant argued that "the cited reference 
Garg et al is silent regarding an entity requesting access to an object on behalf of 
another entity." See response at page 13. According to Applicant, "Cheng and Garg et 
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al fail[s] to teach or suggest, "wherein the entity requests access to an object on behalf 
of another entity, the entity and the another entity are each on an individual human or a 
business" and that "the verification component permits the another entity to call or 
operate on the object upon verification that the entity has the permission." See response 
at page 14. 

1 9. The examiner respectfully disagrees because of the following reasons: 

It is submitted that Swift et al discloses "an entity requesting access to an object on 
behalf of another entity" as detailed in the Office action. 

In addition, Shambroom (6,198,824) discloses a system for providing secure remote 
command execution network, wherein "an entity requesting access to an object on 
behalf of another entity". See abstract and Figs. 1 , 3 and 4. 
Also, Higley et al (5,913,025) discloses a method and apparatus for proxy 
authentication, wherein "an entity requesting access to an object on behalf of another 
entity." See Fig. 6 and column 10, lines 35-53. It should also be noted that the entities of 
Higley et al are "individual human or a business". 

20. Applicant argued that the Corrigan et al reference fails to teach, "wherein the 
entity is attempting access on behalf of another entity, the entity and the another entity 
are each an individual human or a business, ... authorizing the another entity upon 
authorization of the at least one entity." See response at page 14. 

21 . The examiner respectfully disagrees because of the following reasons: 

It is submitted that Swift et al discloses "an entity requesting access to an object on 
behalf of another entity" as detailed in the Office action. 
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In addition, S hambroom (6,198,824) discloses a system for providing secure remote 

command execution network, wherein "an entity requesting access to an object on 

behalf of another entity". See abstract and Figs. 1 , 3 and 4. 

Also, Hiqlev et al (5,913,025) discloses a method and apparatus for proxy 

authentication, wherein "an entity requesting access to an object on behalf of another 

entity." See Fig. 6 and column 10, lines 3 5-53. It should also be noted that the entities 

of Higlev et al are "individual human or a business". 

22. In summary, Applicant has argued the following main points: 

a. Swift et al is not a citable prior art under 35 USC 1 03(c). The examiner 
disagrees as pointed above. Although during the interview, the examiner 
indicated that the Swift et al is not a proper prior art reference under 35 USC 
103(c) and that the rejection will be withdrawn, the examiner now submits that 
the Swift reference is a proper reference absent a proper statement of ownership 
at the time the present application was filed. As such, the rejection(s) using the 
Swift et al reference is/are maintained. However, in anticipation that Applicant 
may provide'5roper statement", the examiner has applied an additional reference 
in support of the teachings of Swift et al. 

b. That the applied prior art references fail to teach "a security option which 
include at least conversion of a subscription from a first type associated with a 
first tenant to a second type associated with a second tenant and that the 
security options including at least conversion of a subscription from a first type to 
a second type." It has been shown that the references teach such limitation. 
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c. That the applied prior art references fail to teach "an entity requesting 
access to an object on behalf of another entity." As noted above, It is submitted 
that Swift et a! discloses "an entity requesting access to an object on behalf of 
another entity" as detailed in the Office action. 

23. In addition, Shambroom (6,198,824) discloses a system for providing secure 
remote command execution network, wherein "an entity requesting access to an object 
on behalf of another entity". See abstract and Figs. 1 , 3 and 4. Also, Higley et al 
(5,913,025) discloses a method and apparatus for proxy authentication, wherein "an 
entity requesting access to an object on behalf of another entity." See Fig. 6 and column 
10, lines 35-53. It should also be noted that the entities of Higley et a! are "individual 
human or a business". 

24. Since new ground(s) of rejection has(ve) been applied against the claims in 
anticipation that a statement averring common ownership at the time the invention was 
made may disqualify the Swift et al reference under 35 U.S.C. 103 based on 35 U.S.C. 
102(e)", this Office action is being made non-final. 



Claim Rejections - 35 USC § 102 

(e) the invention was described in (1 ) an application for patent, published under section 1 22(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351 (a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

25. Claims 31 and 32rejected under 35 U.S.C. 102(e) as being anticipated by 



Coriqan et al (US 6,640,097). 
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Claim 31. Corriqan et al discloses a data packet stored on a computer readable 
storage medium that when transmitted facilitates communications between at 
least two components of an subscription platform service(aibsfracO, comprising: 

i. An Application Programming Interface packet to identify a partner 
(authenticates the subscriber ID to verify that the subscriber is authorized 
(column 5, lines 35-40); 

ii. A security credential packet to facilitate authorization of the partner 
(authorized subscriber access through white and black lists) (column 5, 
lines 50- 55); and 

iii. A security parameter packet inherited by a business object to 
facilitate access to a subscription platform database (the data structure 
includes a identifier used to indicated a specific object property or set of 
properties to which the permission apply) (column 3, lines 35-40), wherein 
the security parameter packet includes at least conversion of a 
subscription from a first type associated another partner to a second type 
associated with the partner, wherein the security parameter indicates 
allowability of the second partner to convert the subscription type from the 
first type to the second type (a service conversion and message relaying 
platform between said interfaces for provision of internet content to 
mobile subscribers) (column 2, lines 5-7; column 3, lines 19-24). 

Claim 32. Corriqan et al discloses a computer readable storage medium having 
a data structure stored thereon, the data structure comprising: 
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i. At least one security field indicating global security parameters in a 
subscription platform database (authorized subscriber access through 
white and blacklists) (column 5, lines 50-55), wherein the global security 
parameters include at least a parameter for conversion of a subscription 
from a first type associated with a first tenant to a second type associated 
with a second tenant, wherein the parameter for conversion indicates 
allowability of the second tenant to convert the subscription type from the 
first type to the second type (a service conversion and message relaying 
platform between said interfaces for provision of internet content to 
mobile subscribers)(column 2, lines 5-7; column 3, lines 19-24); 

ii. At least one object field associated with an account in the database 
(the portal comprises means for instantiating a payment management 
class) (column 3, lines 25-30); and 

iii. At least one class field to associate the security field and the object 
field (the data 

iv. structure includes an identifier used to indicate a specific object 
property or set of properties to which the permission apply) (column 3, 
lines 35-40). 



Claim Rejections - 35 USC § 103 

26. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 
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(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

27. Claims 1-3, 5-6 and 8 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Cheng (US 7,096,491) in view of Hiqlev et al (US 5,913,025).. 

Claim 1. Cheng discloses a system that facilitates access to a plurality of shared 

software objects by disparate entities, comprising: 

iv. A platform component that receives a request to access an object 
(application) by an entity (user)(Fig. 3, item 132, Fig. 5, item 132), wherein 
the entity requests access to an object on behalf of another entity, the 
entity and the another entity are each an individual human or a business; 

v. A data store that stores security information on classes of the 
objects(Fig. 3, item 124); and 

vi. A verification component that employs the security information to 
verify that the entity has permission to call an Application Programming 
Interface (API) for the object or operate on the object(Fig. 3, item130), the 
verification component permits the another entity to call or operate on the 
object upon verification that the entity has the permission. 

However, does not explicitly disclose: wherein the entity requests access to an 
object on behalf of another entity, the entity and the another entity are each an 
individual human or a business or the verification component permits the another 
entity to call or operate on the object upon verification that the entity has the 
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permission. However, Higlev et al discloses a system for proxy authentication, 
which further discloses: 

i. Wherein the entity requests access to an object on behalf of 
another entity (column 5, lines 60-65; column 6, lines 17-25; column 10 
35-55; Fig . 6), the entity and the another entity are each an individual 
human or a business (column 10, lines 35-55); 

ii. The verification component permits the another entity to call or 
operate on the object upon verification that the entity has the permission 
(column 10, lines 35-55). 

Therefore, it would have been obvious to one having ordinary skill in the art at 
the time the invention was made to permit an entity to call on behalf of another 
entity and to verify the authenticity of the entity in Chen 's disclosure. One would 
have been motivated to verify this in order to help maintain the integrity of the 
system by not allowing changes to be made to the software by any entity, both 
known and unknown, scrupulous and unscrupulous 

Claim 2: Cheng and Higlev et al discloses a system that facilitates access to a 
plurality of shared software objects by disparate entities as in claim 1 above, and 
Cheng further discloses that the verification component exposes the object is 
permission exists (Fig. 3, item 136). 

Claim 3. Cheng and Higlev et al discloses a system that facilitates access to a 
plurality of shared software objects by disparate entities as in claim 1 above, and 
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Cheng further discloses that the verification component masks the object is 
permission does not exist (Fig. 3, item 138). 

Claim 5. Cheng and Higlev et al discloses a system that facilitates access to a 
plurality of shared software objects by disparate entities as in claim 1 above, and 
Cheng further discloses that the verification component facilitates that entity 
receive full access to Application Programming Interfaces (API's) and /or object s 
for which there is a business need and partial or limited access to other API's or 
business objects (during subscription process, the user will grant the application 
privileges to perform only those functions, and to access only those resource, 
needed for the English to Spanish translation) (column 4, lines 54-67). 
Claim 6: Cheng and Higlev et al discloses a system that facilitates access to a 
plurality of shared software objects by disparate entities as in claim 1 above, and 
Cheng further discloses that the data store provides a default or determined 
security information related to a class (Fig. 5). 

Claim 8. Cheng and Higlev et al discloses a system that facilitates access to a 
plurality of shared software objects by disparate entities as in claim 1 above, and 
Higlev et al further discloses that the system further comprising a proxy tenant 
component wherein an intermediate entity places calls into a subscription 
platform service on behalf of another entity and achieves access to selected 
objects in order for the another entity to complete a subscription purchase 
(column 10, lines 35-55). Therefore, it would have been obvious to one having 
ordinary skill in the art at the time the invention was made to modify the 
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combined teaching of Cheng such as to support proxies tenant callers. One 
would have been motivated to do in order to make the system flexible. 

28. Claimsl 8-29 are rejected under 35 U.S.C. 1 03(a) as being unpatentable over 
Corriqan et al (US 6,640,097) in view of Beckwith et al (US 6,330,598). 

Claims 18. Corriqan et al discloses a method to facilitate security for subscription 

objects, comprising: 

vii. storing one or more security options in a database, the security 
options related to an 

automated billing and provisioning system, wherein the security options 
include at least conversion of a subscription from a first type associated 
with a first tenant to a second type associated with a second tenant, 
wherein the security option indicates allowability of the second tenant to 
convert the subscription type from the first type to the second type (a 
service conversion and message relaying platform between said 
interfaces for provision of internet content to mobile subscribers) (column 
2, lines 5-7; column 3, lines 19-24) ± 

viii. Assigning the security options to a class {the platform comprises 
means for controlling mobile subscriber access according to the security 
criteria) (column 2, lines 9-15); and 
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ix. Inheriting the security options by object members of the class 
(verification of subscriber access rights is an intrinsic part of the session 
management functions provided by the portal (column 9, lines 17-20). 
But does not explicitly discloses a step of storing one or more security options in 
a database, the security options related to an automated billing and provisioning 
system. However, Beckwith et al discloses a global service management system, 
which further discloses a step of storing one or more security options in a 
database, the security options related to automate billing and provisioning (the 
objects 84 in the automatic provisioning receiver class are capable of recording 
requests to add or delete services from subscription packages, to acknowledge 
that the requested service modification(s) (be they adding a service to a 
subscription package or deleting a service from a subscription package) have 
been scheduled, and to deliver the requested service modification(s) to the 
appropriate objects for implementing the change(s) {column 3, lines 29-40; 
column 6, lines 5-9; column 7, lines 54-56; column 8, Hns47-58). Therefore, it 
would have been obvious to one having ordinary skill in the art at the time of the 
invention was made for Corriqan et al to include at least a step of converting a 
subscription type. One would have been motivated to do in order to make the 
system flexible. 

Claim 19. Corriqan et al and Beckwith et al disclose a system to provide access 
control to individual properties of an object as in claim 18 above, and Corriqan et 
al further discloses that the system further comprises at least one of explicit and 
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implicit assigning the security options to object members of a class (security 
future such as white list or blacklist are used to authenticates access to particular 
services (column 5, lines 27-30). 

Claim 20. Corriqan et al and Beckwith et al disclose a system to provide access 
control to individual properties of an object as in claim 18 above, and Corrigan et 
al further discloses that the system further comprises accessing database via an 
application programming interface (in one embodiment, the portal comprises a 
secure web-bases self provisioning interface comprising means for setting mobile 
network subscribers to select a portfolio of personalized services (column 2, lines 
53-57). 

Claim 21: Corriqan et al and Beckwith et al disclose a system to provide access 
control to individual properties of an object as in claim 20 above, and Corriqan et 
al further discloses a step of authorizing the API (the node controls all subscriber 
accesses to the network operator managed service portfolio and authenticates 
the ID to verify that the subscriber is authorized (column 5, lines 33-38). 
Claim 22: Corriqan et al and Beckwith et al disclose a system to provide access 
control to individual properties of an object as in claim 21 above, and Corriqan et 
al further discloses that the system further comprises returning an error code if 
an authorization procedure fails (the push server also support the push access 
protocol result notification. It will acknowledge successful or report unsuccessful 
transmission and delivery of the information pushed and return a status) (column 
11, lines 10-15). 
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Claim 23. Corrigan et al and Beckwith et al disclose a system to provide access 
control to individual properties of an object as in claim 21 above, and Corrigan et 
al further discloses a step of analyzing a simple object request (a mobile user 
service request reaches the node as URL request in http format, and the node 
presents a login screen. The user inputs access security codes and the node 
interfaces on the Internet side to have the required content delivered) (column 4 
lines 1-10). 

Claim 24. Corrigan et al and Beckwith et al disclose a system to provide access 
control to individual properties of an object as in claim 21 above, and Corrigan et 
al further discloses a step of analyzing one or more security credentials 
(verification of subscriber access rights is an intrinsic part of the session 
management functions provided by the portal (column 9, lines 15-20). 
Claim 25. Corrigan et al and Beckwith et al disclose a system to provide access 
control to individual properties of an object as in claim 24 above, and Corrigan et 
al further discloses that the system further comprises employing a cache to 
process the credentials (portal comprises a customer care provisioning interface 
and a provisioning database) (column 2, lines 65-68, Fig 2) 
Claim 26. Corrigan et al and Beckwith et al disclose a system to provide access 
control to individual properties of an object as in claim 18 above, and Corrigan et 
al further discloses that the system further comprises a subscription platform 
service (the platform comprises means for controlling subscriber access 
according to security criteria (column 2, lines 5-10). 
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Claim 27. Corrigan et al and Beckwith et al disclose discloses a system to 
provide access control to individual properties of an object as in claim 18 above, 
and further discloses that the security options are associated with default security 
parameters (a generic subscriber class which is defined within the portal and 
represents common characteristics of all subscribers) (column 8, lines 44-48). 
Claim 28. Corrigan et al and Beckwith et al disclose discloses a system to 
provide access control to individual properties of an object as in claim 18 above, 
and Corrigan et al further discloses that the system further comprises overriding 
default security parameters with other options (from the generic subscriber class 
are derived many subscriber sub-class that allow the portal to manage subscriber 
profiles across a wide range of different technologies) (column 8, lines 47-50). 
Claim 29: Corrigan et al and Beckwith et al disclose discloses a system to 
provide access control to individual properties of an object as in claim 18 above, 
and Corrigan et further discloses that the system further comprises employing an 
intermediate proxy that places call in a subscription on behalf of another tenant 
(the wireless application protocol (WAP) is a complete WAP capable mobile 
stations to access applications and services which may be hosted either within 
the network operator's own domain or in another location (column 10, lines 50- 
55). 



Application/Control Number: 10/729,515 Page 20 

Art Unit: 2136 

29. Claims 4, 7, and 1 3-1 6 are rejected under 35 U.S.C. 1 03(a) as being 
unpatentable over Cheng (US 7,096,491 ) in view of Hiqlev et al (US 5,91 3,025) in 
further view of Corriqan et al (US 6,640,097). 

Claim 4. Cheng and Hiqlev et al discloses a system that facilitates access to a 
plurality of shared software objects by disparate entities as in claim 1 above, 
while neither of them explicitly discloses that the system further comprise a 
subscription platform to facilitate automated billing and provisioning accounts. 
However, Corriqan et al discloses a similar system, which discloses a 
subscription platform to facilitate automated billing and provisioning accounts 
(column 4, lines 45-50). Therefore, it would have been obvious to one having 
ordinary skill in the art at the time the invention was made to modify the 
combined teaching of Cheng and Hiqlev et al such as to include a subscription 
platform to facilitating automated billing and provisioning accounts. One would 
have been motivated to do so in order to facilitate accounts management. 
Claim 7: Cheng and Hiqlev et al discloses a system that facilitates access to a 
plurality of shared software objects by disparate entities as in claim 6 above, 
while neither of them explicitly discloses that the system further comprise a 
component to override the default security information with higher or different 
security options. However, Corrigan et al discloses a similar system, which 
further comprises a component to override the default security information with 
higher or different security options (from the generic subscriber class are derived 
many subscriber sub-class that allow the portal to manage subscriber profiles 
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across a wide range of different technologies) (column 8, lines 47-50). I 
Therefore, it would have been obvious to one having ordinary skill in the art at 
the time the invention was made to modify the combined teaching of Cheng and 
Hiqlev et al such as to override default security with higher or different security 
options. One would have been motivated to do in order to make the system 
efficient. 

Claim 13. Cheng and Hiqlev et al discloses a system that facilitates access to a 
plurality of shared software objects by disparate entities as in claim 1 above, 
while neither of them explicitly discloses that the system further comprises al 
least one of a sign-up API caller, an account management API caller, and a 
customer care API caller. However, Corriqan et al discloses a similar system, 
which further discloses a customer care-provisioning interface including a device 
provisioning function which enables the operator to ensure that content is 
matched to the device type (column 5, lines 10-15). Therefore, it would have 
been obvious to one having ordinary skill in the art at the time the invention was 
made to modify the combined teaching of Cheng and Hiqlev et al such as to 
include a customer care API caller. One would have been motivated to do in 
order to simplify service management. 

Claim 14. Cheng . Hiqlev et al and Corriqan et al discloses a system that 
facilitates access to a plurality of shared software objects by disparate entities as 
in claim 1 3 above, Corrigan et al further discloses disclose that the system 
further comprises al least one API related to at least of a sign-up API group, an 
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account management API group, a customer care API group, and object 
designer API group (to provide access control to individual properties that further 
a customer care provisioning interface including a device provisioning function 
which enables the operator to ensure that content is matched to the device type) 
(column 5, lines 10-15). Therefore, it would have been obvious to one having 
ordinary skill in the art at the time the invention was made to modify the 
combined teaching of Cheng and Higlev et al such as to include a customer care 
API group. One would have been motivated to do in order to make the system 
efficient. 

Claim 15. Cheng and Higlev et al discloses a system that facilitates access to a 
plurality of shared software objects by disparate entities as in claim 1 above, 
while neither of them explicitly discloses that the system further comprises an 
authorization logic that determines whether an API can access an object via an 
access rights set. However, Corrioan et al discloses a similar system, which 
further discloses that the system further comprises an authorization logic that 
determines whether an API can access an object via an access rights set (to 
provide access control to individual properties that further discloses a node 
acting as a service manager for mobile subscriber. It controls all subscriber 
accesses to the network operators managed service portfolio and authenticates 
the subscriber ID to verify that the subscriber is authorized to access a particular 
service before opening a secure connection) (column 5, lines 35-40). Therefore, 
it would have been obvious to one having ordinary skill in the art at the time the 
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invention was made to modify the combined teaching of Cheng and Higlev et al 
such as to include an authorization component. One would have been motivated 
to do so in order to restrict and control access to various components and 
services provides within the system. 

Claim 16. Cheng and Higlev et al discloses a system that facilitates access to a 
plurality of shared software objects by disparate entities as in claim 1 above, 
while neither of them explicitly discloses that the system further comprises at 
least one of a restricted audience offer, a conversion component, and a payment 
instrument component. However, Corrigan et a I discloses a similar system, 
which further discloses that that the system further comprises at least one of a 
restricted audience offer, a conversion component, and a payment instrument (to 
provide access control to individual properties that further discloses a payment 
management class from which are derived two sub-classes post-paid and pre- 
paid) (column 10, lines 20-25). Therefore, it would have been obvious to one 
having ordinary skill in the art at the time the invention was made to modify the 
combined teaching of Cheng and Higlev et al such as to include a payment 
component. One would have been motivated to do so in order to restrict and 
control access to various components and services provides within the system. 

30. Claims 9-12 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Cheng (US 7,096,491 ) in view of Higlev et al (US 5,91 3,025) in further view of Garg et 
al (US 6,289,458). 
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Claim 9. Cheng and Higlev et al discloses a system that facilitates access to a 
plurality of shared software objects by disparate entities as in claim 1 above, 
while neither of them explicitly discloses a management portal to facilitate 
authorization. However Garq et al discloses a system to provide access control 
to individual properties of an object, which comprises a management portal to 
facilitate authorization (file system manger maintains and coordinates access to 
file system) (column 7, lines 25-29). Therefore, it would have been obvious to 
one having ordinary skill in the art at the time the invention was made to modify 
the combined teaching of Cheng and Higlev et al such as to include a 
management portal. One would have been motivated to do so in order to help 
maintain the integrity of the system by not allowing changes to be made to the 
software by any entity, both known and unknown, scrupulous and unscrupulous. 
Claim 10. Cheng and Higlev et al discloses a system that facilitates access to a 
plurality of shared software objects by disparate entities as in claim 1 above, 
while neither of them explicitly discloses a component to provide an explicit 
security mapping for an object. However, Garg et al discloses a system to 
provide access control to individual properties of an object which, further 
comprises a component to provide an explicit security mapping for an object (the 
access control list contains zero or more access control entries, which define the 
access control applied to the object. Each entry in the list defines a set of 
permission to be applied to a particular UUSERID or GROUPID with respect to 
either the object as a whole or individual properties of object. Desirably the order 
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of entries in the access control list is significant) (column 8, lines 35-55). 
Therefore, it would have been obvious to one having ordinary skill in the art at 
the time the invention was made to modify the combined teaching of Cheng and 
Hiqlev et al such as to include a management portal. One would have been 
motivated to verify this in order to help maintain the integrity of the system by not 
allowing changes to be made to the software by any entity, both known and 
unknown, scrupulous and unscrupulous. 

Claim 11. Cheng and Hiqlev et al discloses a system that facilitates access to a 
plurality of shared software objects by disparate entities as in claim 1 above, 
while neither of them explicitly discloses a component to enable an implicit 
security mapping from an explicit mapped object or to derive an implicit security 
permission by utilizing related objects. However, Garq et al discloses a system to 
provide access control to individual properties of an object as in claim 1 , above 
and further comprises a component to enable an implicit security mapping from 
an explicit mapped object or to derive an implicit security permission by utilizing 
related objects {security descriptor provides details on the security and access 
control applicable to object (column 8, lines 25-30). Therefore, it would have 
been obvious to one having ordinary skill in the art at the time the invention was 
made to modify the combined teaching of Cheng and Hiqlev et al such as to 
include a management portal.. One would have been motivated to verify this in 
order to help maintain the integrity of the system by not allowing changes to be 
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made to the software by any entity, both known and unknown, scrupulous and 
unscrupulous. 

Claim 12. Cheng and Higlev et al discloses a system that facilitates access to a 
plurality of shared software objects by disparate entities as in claim 1 above, 
while neither of them explicitly discloses that the verification component employs 
operating system identities to facilitate security authorization procedures. 
However, Garg et al discloses a system to provide access control to individual 
properties of an object which, further discloses the verification component 
employs operating system identities to facilitate security authorization procedures 
(security descriptor contains various properties including the owner security 
identifier and access control list) (column 8, Hnes27-30). Therefore, it would have 
been obvious to one having ordinary skill in the art at the time the invention was 
made to modify the combined teaching of Cheng and Higlev et al such as to 
include a management portal. One would have been motivated to verify this in 
order to help maintain the integrity of the system by not allowing changes to be 
made to the software by any entity, both known and unknown, scrupulous and 
unscrupulous. 

31 . Claim 30 is rejected under 35 U.S.C. 103(a) as being unpatentable over Corrigan 

etal (US 6,640,097) in view of Higlev et al (US 5,913,025). 

Claim 30. Corrigan et al discloses a system embodied on a computer readable 
storage medium to facilitate business object security, comprising: 
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i. Means for authenticating at least one entity attempting access to an 
online billing and service, {subscriber authentication) (column 4, line 33); 

ii. Means for authorizing the at least one entity and authorizing the 
another entity upon authorization of the at least one entity (authorities 
subscriber access through white and black lists) (column 5, Hnes50-5)); 
and 

iii. Means for associating a security parameter with at least one 
business object from a globalize region of database {the data structure 
includes an identifier used to indicated a specific object property or set of 
properties to which the permission apply) (column 3, lines 35-40). 

But does not explicitly discloses that wherein the at least one entity is attempting 
access on behalf of another entity, the entity and the another entity are each an 
individual human or business. However, Higlev et al discloses a system of proxy 
authentication in a secure network, which further discloses wherein the entity 
requests access to an object on behalf of another entity (column 2, lines 53-60; 
column 3, lines 50-55; column 6, lines 17-25; column 10, 35-55). Therefore, it 
would have been obvious to one having ordinary skill in the art at the time the 
invention was made to permit an entity to call on behalf of another entity and to 
verify the authenticity of the entity in Corriqan et al 's disclosure. One would have 
been motivated to verify this in order to help maintain the integrity of the system 
by not allowing changes to be made to the software by any entity, both known 
and unknown, scrupulous and unscrupulous. 
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32. Claims 1-3, 5, 6 and 8 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Cheng (US 7, 096,491) in view of Swift et al (US 7,1 13,994). 
Claim 7: Chenq discloses a system that facilitates access to a plurality of shared 
software objects by disparate entities, comprising: 

i. A platform component that receives a request to access an object 
(application) by an entity (user) (Fig. 3 item 132, Fig. 5 item 132), wherein 
the entity requests access to an object on behalf of another entity, the 
entity and the another entity are each an individual human or a business; 

ii. A data store that stores security information on classes of the 
objects (Fig. 3, item 124); and 

iii. A verification component that employs the security information to 
verify that the entity has permission to call an Application Programming 
Interface (API) for the object or operate on the object (Fig. 3, item 130), 
the verification component permits the another entity to call or operate on 
the object upon verification that the entity has the permission. 

But does not explicitly disclose: wherein the entity requests access to an object 
on behalf of another entity, the entity and the another entity are each an 
individual human or a business or the verification component permits the another 
entity to call or operate on the object upon verification that the entity has the 
permission. However, Swift et a I discloses a system of proxy authentication in a 
secure network, which further discloses: 
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i. Wherein the entity requests access to an object on behalf of 
another entity (authorized proxy client to access a service on behalf of a 
user) (column 2, lines 27-35), the entity and the another entity are each an 
individual human or a business (Fig. 7, item 70); 

ii. The verification component permits the another entity to call or 
operate on the object upon verification that the entity has the permission 
(Fig. 9). 

Therefore, it would have been obvious to one having ordinary skill in the art at 
the time the invention was made to permit an entity to call on behalf of another 
entity and to verify the authenticity of the entity in Chen 's disclosure. One would 
have been motivated to verify this in order to help maintain the integrity of the 
system by not allowing changes to be made to the software by any entity, both 
known and unknown, scrupulous and unscrupulous. 

Claim 2: Cheng and Swift et a I discloses a system that facilitates access to a 
plurality of shared software objects by disparate entities as in claim 1 above, and 
Cheng further discloses that the verification component exposes the object is 
permission exists (Fig. 3, item 136). 

Claim 3. Cheng and Swift et a I discloses a system that facilitates access to a 
plurality of shared software objects by disparate entities as in claim 1 above, and 
Cheng further discloses that the verification component masks the object is 
permission does not exist (Fig. 3, item 138). 
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Claim 5. Cheng and Swift et a I discloses a system that facilitates access to a 
plurality of shared software objects by disparate entities as in claim 1 above, and 
Cheng further discloses that the verification component facilitates that entity 
receive full access to Application Programming Interfaces (API's) and /or object s 
for which there is a business need and partial or limited access to other API's or 
business objects (during subscription process, the user will grant the application 
privileges to perform only those functions, and to access only those resource, 
needed for the English to Spanish translation) (column 4, lines 54-67). 
Claim 6: Cheng and Swift et a I discloses a system that facilitates access to a 
plurality of shared software objects by disparate entities as in claim 1 above, and 
Cheng further discloses that the data store provides a default or determined 
security information related to a class (Fig. 5). 

Claim 8. Cheng and Swift et a I discloses a system that facilitates access to a 
plurality of shared software objects by disparate entities as in claim 1 above, and 
Swift et al further discloses that the system further comprising a proxy tenant 
component wherein an intermediate entity places calls into a subscription 
platform service on behalf of another entity and achieves access to selected 
objects in order for the another entity to complete a subscription purchase 
(authorized proxy client to access a service on behalf of a user) (column 2, lines 
27-35). Therefore, it would have been obvious to one having ordinary skill in the 
art at the time the invention was made to modify the combined teaching of Cheng 
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such as to support proxies tenant callers. One would have been motivated to do 
in order to make the system flexible. 



33. Claims 4, 7 and 13-16 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Cheng (US 7,096,491) in view of Swiff et al (US 7,1 13,994) in further 
view of Corriqan et al (US 6,640,097). 

Claim 4. Cheng and Swift et a I discloses a system that facilitates access to a 
plurality of shared software objects by disparate entities as in claim 1 above, 
while neither of them explicitly discloses that the system further comprise a 
subscription platform to facilitate automated billing and provisioning accounts. 
However, Corriqan et al discloses a similar system, which discloses a 
subscription platform to facilitate automated billing and provisioning accounts 
(column 4, lines 45-50). Therefore, it would have been obvious to one having 
ordinary skill in the art at the time the invention was made to modify the 
combined teaching of Cheng and Swift et a I such as to include a subscription 
platform to facilitating automated billing and provisioning accounts. One would 
have been motivated to do so in order to facilitate accounts management. 
Claim 7: Cheng and Swift et a I discloses a system that facilitates access to a 
plurality of shared software objects by disparate entities as in claim 6 above, 
while neither of them explicitly discloses that the system further comprise a 
component to override the default security information with higher or different 
security options. However, Corrigan et al discloses a similar system, which 
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further comprises a component to override the default security information with 
higher or different security options (from the generic subscriber class are derived 
many subscriber sub-class that allow the portal to manage subscriber profiles 
across a wide range of different technologies) (column 8, lines 47-50). I 
Therefore, it would have been obvious to one having ordinary skill in the art at 
the time the invention was made to modify the combined teaching of Cheng and 
Swift et al such as to override default security with higher or different security 
options. One would have been motivated to do in order to make the system 
efficient. 

Claim 13. Cheng and Swift et a I discloses a system that facilitates access to a 
plurality of shared software objects by disparate entities as in claim 1 above, 
while neither of them explicitly discloses that the system further comprises al 
least one of a sign-up API caller, an account management API caller, and a 
customer care API caller. However, Corrigan et al discloses a similar system, 
which further discloses a customer care-provisioning interface including a device 
provisioning function which enables the operator to ensure that content is 
matched to the device type (column 5, lines 10-15). Therefore, it would have 
been obvious to one having ordinary skill in the art at the time the invention was 
made to modify the combined teaching of Cheng and Swift et a I such as to 
include a customer care API caller. One would have been motivated to do in 
order to simplify service management. 
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Claim 14. Cheng , Swift et al and Corrigan et a I discloses a system that facilitates 
access to a plurality of shared software objects by disparate entities as in claim 
13 above, Corrigan et al further discloses disclose that the system further 
comprises al least one API related to at least of a sign-up API group, an account 
management API group, a customer care API group, and object designer API 
group (to provide access control to individual properties that further a customer 
care provisioning interface including a device provisioning function which enables 
the operator to ensure that content is matched to the device type) (column 5, 
lines 10-15). Therefore, it would have been obvious to one having ordinary skill 
in the art at the time the invention was made to modify the combined teaching of 
Cheng and Swift et a I such as to include a customer care API group. One would 
have been motivated to do in order to make the system efficient. 
Claim 15. Cheng and Swift et a I discloses a system that facilitates access to a 
plurality of shared software objects by disparate entities as in claim 1 above, 
while neither of them explicitly discloses that the system further comprises an 
authorization logic that determines whether an API can access an object via an 
access rights set. However, Corrigan et al discloses a similar system, which 
further discloses that the system further comprises an authorization logic that 
determines whether an API can access an object via an access rights set (to 
provide access control to individual properties that further discloses a node 
acting as a service manager for mobile subscriber. It controls all subscriber 
accesses to the network operators managed service portfolio and authenticates 
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the subscriber ID to verify that the subscriber is authorized to access a particular 
service before opening a secure connection) (column 5, lines 35-40). Therefore, 
it would have been obvious to one having ordinary skill in the art at the time the 
invention was made to modify the combined teaching of Cheng and Swift et al 
such as to include an authorization component. One would have been motivated 
to do so in order to restrict and control access to various components and 
services provides within the system. 

Claim 16. Cheng and Swift et a I discloses a system that facilitates access to a 
plurality of shared software objects by disparate entities as in claim 1 above, 
while neither of them explicitly discloses that the system further comprises at 
least one of a restricted audience offer, a conversion component, and a payment 
instrument component. However, Corriqan et a I discloses a similar system, 
which further discloses that that the system further comprises at least one of a 
restricted audience offer, a conversion component, and a payment instrument (to 
provide access control to individual properties that further discloses a payment 
management class from which are derived two sub-classes post-paid and pre- 
paid) (column 10, lines 20-25). Therefore, it would have been obvious to one 
having ordinary skill in the art at the time the invention was made to modify the 
combined teaching of Cheng and Swift et a I such as to include a payment 
component. One would have been motivated to do so in order to restrict and 
control access to various components and services provides within the system. 
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34. Claims 9-12 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Cheng (US 7, 096,491 ) in view of Swift et al (US 7,1 1 3,994) in further view of Garq et al 
(US 6,289,458). 

Claim 9. Cheng and Swift et a I discloses a system that facilitates access to a 
plurality of shared software objects by disparate entities as in claim 1 above, 
while neither of them explicitly discloses a management portal to facilitate 
authorization. However Garq et al discloses a system to provide access control 
to individual properties of an object, which comprises a management portal to 
facilitate authorization (file system manger maintains and coordinates access to 
file system) (column 7, lines 25-29). Therefore, it would have been obvious to 
one having ordinary skill in the art at the time the invention was made to modify 
the combined teaching of Cheng and Swift et a I such as to include a 
management portal. One would have been motivated to do so in order to help 
maintain the integrity of the system by not allowing changes to be made to the 
software by any entity, both known and unknown, scrupulous and unscrupulous. 
Claim 10. Cheng and Swift et a I discloses a system that facilitates access to a 
plurality of shared software objects by disparate entities as in claim 1 above, 
while neither of them explicitly discloses a component to provide an explicit 
security mapping for an object. However, Garg et al discloses a system to 
provide access control to individual properties of an object which, further 
comprises a component to provide an explicit security mapping for an object (the 
access control list contains zero or more access control entries, which define the 
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access control applied to the object. Each entry in the list defines a set of 
permission to be applied to a particular UUSERID or GROUPID with respect to 
either the object as a whole or individual properties of object. Desirably the order 
of entries in the access control list is significant) (column 8, lines 35-55). 
Therefore, it would have been obvious to one having ordinary skill in the art at 
the time the invention was made to modify the combined teaching of Cheng and 
Swift et al such as to include a management portal. One would have been 
motivated to verify this in order to help maintain the integrity of the system by not 
allowing changes to be made to the software by any entity, both known and 
unknown, scrupulous and unscrupulous. 

Claim 11: Cheng and Swift et al discloses a system that facilitates access to a 
plurality of shared software objects by disparate entities as in claim 1 above, 
while neither of them explicitly discloses a component to enable an implicit 
security mapping from an explicit mapped object or to derive an implicit security 
permission by utilizing related objects. However, Garg et al discloses a system to 
provide access control to individual properties of an object as in claim 1 , above 
and further comprises a component to enable an implicit security mapping from 
an explicit mapped object or to derive an implicit security permission by utilizing 
related objects (security descriptor provides details on the security and access 
control applicable to object (column 8, lines 25-30). Therefore, it would have 
been obvious to one having ordinary skill in the art at the time the invention was 
made to modify the combined teaching of Cheng and Swift et a I such as to 



Application/Control Number: 10/729,515 Page 37 

Art Unit: 2136 

include a management portal.. One would have been motivated to verify this in 
order to help maintain the integrity of the system by not allowing changes to be 
made to the software by any entity, both known and unknown, scrupulous and 
unscrupulous. 

Claim 12. Cheng and Swift et a I discloses a system that facilitates access to a 
plurality of shared software objects by disparate entities as in claim 1 above, 
while neither of them explicitly discloses that the verification component employs 
operating system identities to facilitate security authorization procedures. 
However, Garq et al discloses a system to provide access control to individual 
properties of an object which, further discloses the verification component 
employs operating system identities to facilitate security authorization procedures 
(security descriptor contains various properties including the owner security 
identifier and access control list) (column 8, lines27-30). Therefore, it would have 
been obvious to one having ordinary skill in the art at the time the invention was 
made to modify the combined teaching of Cheng and Swift et a I such as to 
include a management portal. One would have been motivated to verify this in 
order to help maintain the integrity of the system by not allowing changes to be 
made to the software by any entity, both known and unknown, scrupulous and 
unscrupulous. 

35. Claim 30 is rejected under 35 U.S.C. 103(a) as being unpatentable over Corriqan 
et al (US 6,640,097) in view of Swift et al (US 7,1 1 3,994). 
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Claim 30: Corrigan et al discloses a system to provide access control to 
individual properties of an object comprising: 

i. Means for authenticating at least one entity attempting 
access to an online billing and service,; (subscriber authentication) 
(column 4, line 33); 

ii. Means for authorizing the at least one entity and authorizing 
the another entity upon authorization of the at least one entity 
(authorities subscriber access through white and black lists) 
(column 5, lines50-55)); and 

iii. Means for associating a security parameter with at least one 
business object from a globalize region of database (the data 
structure includes an identifier used to indicated a specific object 
property or set of properties to which the permission apply) (column 
3, lines 35-40). 

But does not explicitly discloses that wherein the at least one entity is attempting 
access on behalf of another entity, the entity and the another entity are each an 
individual human or business. However, Swift et a I discloses a system of proxy 
authentication in a secure network, which further discloses wherein the entity 
requests access to an object on behalf of another entity (authorized proxy client 
to access a service on behalf of a user) (column 2, lines 27-35). Therefore, it 
would have been obvious to one having ordinary skill in the art at the time the 
invention was made to permit an entity to call on behalf of another entity and to 
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verify the authenticity of the entity in Corriqan et al 's disclosure. One would have 
been motivated to verify this in order to help maintain the integrity of the system 
by not allowing changes to be made to the software by any entity, both known 
and unknown, scrupulous and unscrupulous. 



Conclusion 

36. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

Moreh et al ( US 6,158,007)Security system for event base middleware. 

Eggebraaten et al (US 7,146,635) Apparatus and method for using a directory service. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Fatoumata Traore whose telephone number is (571) 
270-1685. The examiner can normally be reached Monday through Thursday from 7:00 
a.m. to 4:00 p.m. and every other Friday from 7:30 a.m. to 3:30 p.m. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nassar G. Moazzami, can be reached on (571) 272 4195. The fax phone 
number for Formal or Official faxes to Technology Center 2100 is (571 ) 273-8300. Draft 
or Informal faxes, which will not be entered in the application, may be submitted directly 
to the examiner at (571) 270-2685. 
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Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the Group Receptionist whose telephone number is 
(571)272-2100. 

FT 

Monday, June 16, 2008 



/Nasser G Moazzami/ 

Supervisory Patent Examiner, Art Unit 2136 



